# aqwxdeartf56.t.mydomain.zone — MALICIOUS

> Avoid aqwxdeartf56.t.mydomain.zone as it hosts active phishing attacks. Do not enter personal data and report suspicious activity promptly.

## Summary
PhishDestroy identifies aqwxdeartf56.t.mydomain.zone as an active high-risk phishing domain targeting user credentials. The site attempts to deceive users into disclosing sensitive information.

Technical analysis shows the domain resolves to IP address 5.39.252.52 and is flagged by 10 out of 95 security vendors on VirusTotal. This indicates a widely recognized malicious infrastructure.

The domain remains active and poses significant risk. Users are advised to avoid interaction, block the domain, and report any phishing attempts. Continuous monitoring is recommended to mitigate potential exposure.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 403)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 5.39.252.52
- Nameservers: ns1.justhost.ru ns2.justhost.ru

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["Cluster25", "CRDF", "CyRadar", "ESET", "Fortinet", "Gridinsoft", "Seclookup", "Sophos", "URLQuery", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/1YvPvVBr/b8270e4a4708.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/5737a143-d2ae-41d4-9843-af67e4466844
- PhishDestroy: https://phishdestroy.io/domain/aqwxdeartf56.t.mydomain.zone/
- LLM endpoint: https://phishdestroy.io/domain/aqwxdeartf56.t.mydomain.zone/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/aqwxdeartf56.t.mydomain.zone/
Last updated: 2026-03-19